DSE security knowledge hub

Microsoft 365 & Identity
Knowledge

Page 49 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Microsoft 365 & Identity knowledge center

Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.

Start with the cornerstone guide
DSE post stream

Microsoft 365 & Identity

764 articles
DSE visual briefNetworks & infrastructure

Validate DNS Encryption using DNS over HTTPS in Windows and Windows Server with AD/DNS evidence

Microsoft states: “Traditional DNS uses unencrypted UDP or TCP messages on port 53, which exposes DNS traffic to passive monitoring, traffic analysis, and active manipulation by attackers.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefNetworks & infrastructure

Stage What is DNSSEC on DNS Server in Windows Server? with AD/DNS rollback checks

Microsoft states: “Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefIdentity & cloud

Validate What is Active Directory Certificate Services in Windows Server? with AD/DNS evidence

Microsoft states: “Active Directory Certificate Services (AD CS) is a Windows Server role for issuing and managing public key infrastructure (PKI) certificates used in secure communication and authentication protocols.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist